Control Center

16 November 2009 Rogue 5 Comments

Control Center, as seen in the image below is a virus. A malicious security application that will use aggressive promotional method for its campaign. Browser redirection, excessive pop-up alerts and frequent fake virus scan are just some  misbehavior it conceive once installed on the computer. Control Center will get a hold of Windows registry and modifies it to suit the needs. That clever move makes the rogue software to load automatically when Windows start. The malware can also create havoc on the infected computer by disabling various Windows functionalities including Task Manager, Folder Options, Registry Editor and Safe Mode. These functions are unavailable when you need it most to manually remove the fake antivirus.

Usually, Control Center does not need manual installation to have an access on the computer. It will not load the normal way because it is using different strategies to sneak into the system without your notice. Another Trojan that is capable of bypassing installed security programs will invade your computer and assist the fake antivirus. Main role of the Trojan is to conceal the installation of Control Center. Also, this Trojan will end the presence of legitimate anti-virus software so that other malicious files from a distant server can be fetch without an obstruction.

The focal point of Control Center’s entire activity is money. Rogue program developers sees this fraudulent action as an opportunity to steal money from computer users. Beware of this hollow security product.

Alias: PCenter, Privacy Center

Damage Level: Low

Systems Affected: Windows

Screenshot Image:

Update: August 12, 2010
Control Center rogue program is going back to its active state and is currently promoted on some web sites. This time it was titled “Privacy Center – Control Center” and is carrying a slogan “Simple one-click solution to protect your PC. The graphical user interface is also changed by just a bit. The same interface was used in its old variants Security Center.

In an attempt to further convince user, this unwanted application will present several warning messages. These are fake. Never trust it and do not click on any links it will provide. 

Warning!
Control Center did not find any antivirus software on this computer! Traces of discreditable files (for example, the history of visiting adult sites) and security exposure have been found. Click this notification to eliminate vulnerability immediately.

Control Center Removal Procedures

Control Center REMOVAL TOOL:
In order to completely remove the threat, click here to download and run Malwarebytes Anti-Malware. Sometimes, Trojans will block the downloading and installation of MBAM. If this happens, download it from a clean computer and rename the executable file before executing on the infected computer.

MANUAL REMOVAL PROCEDURE:
1. Press Ctrl+Alt+Del on keyboard to stop process associated to “Control Center”. When Windows Task Manager opens, go to Processes Tab and find and end the following process:
agent.exe, ccagent.exe

2. You need to update installed antivirus application to have the latest database.

3. Thoroughly scan the system and any detected threats must be removed. If removal is prohibited, it is best to quarantine the infected item. Manually locating and deleting of malicious files should also be performed. Please see files below that are related to Control Center Virus.

4. Registry entries created by Control Center must also be removed from the Windows system. Please refer below for entries associated to the rogue program.
- For Windows 2000/XP: Go to Start > Run, type “regedit” on dialog box then press Enter on keyboard.
- For Windows Vista/7: Go to Start > Search Program and Files, type “regedit” and press Enter.

5. Exit registry editor.

6. Get rid of Control Center start-up entry by going to Start > Run, type msconfig on the “Open” dialog box. A windows containing System Configuration Utility will be launched. Go to Startup tab and uncheck the following Start-up item(s):
agent.exe, ccagent.exe

7. Click Apply and restart Windows.

Technical Details and Additional Information:

Malicious Files Added by Control Center
%UserProfile%\Application Data\CC
%UserProfile%\Application Data\CC\agent.exe
%UserProfile%\Application Data\CC\cc.exe
%UserProfile%\Application Data\CC\settings.ini
%UserProfile%\Application Data\CC\uninstall.exe
%UserProfile%\Application Data\CC\faq
%UserProfile%\Application Data\CC\faq\guide.html
%UserProfile%\Desktop\Control center.lnk
%UserProfile%\Application Data\CCenter\ccagent.exe

File Location for Windows Versions:

• %UserProfile% for Vista/7 user is C:\Users\<Current User>; for Windows XP/2000 this is C:\Documents and Settings\<Current User>.

Control Center Registry Entries:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Control center
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “agent.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “ccagent.exe”
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%UserProfile%\Application Data\CC\cc.exe”